Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
File:                     D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer (raw, json)
Hash identifier:          Vkt9bjNmsNQwYmRnlP5zC/UzHK0AgbP2QivTXCUzfXs=
Subject key identifier:   D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       508812697818DA0492E4EC517FE73EB1A2392F99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 04 Jul 2025 19:45:12 +0000
Certificate not after:    Fri 03 Jul 2026 19:50:12 +0000
Subordinate resources:    IP: 2a05:dfc1:c400::/40
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:88:12:69:78:18:da:04:92:e4:ec:51:7f:e7:3e:b1:a2:39:2f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 19:45:12 2025 GMT
            Not After : Jul  3 19:50:12 2026 GMT
        Subject: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:d4:1f:55:a2:57:5a:57:6e:56:8b:e5:c4:
                    b4:0b:21:cd:f6:c2:31:8c:96:ec:ae:30:e6:61:7a:
                    93:e2:4f:d7:2a:3a:fb:aa:9f:73:6c:04:83:f9:2c:
                    b7:92:75:99:57:e1:70:1f:1e:cc:5c:7a:16:39:13:
                    65:23:75:6e:e0:60:fd:12:28:e7:c6:b0:01:93:3d:
                    81:e4:cf:14:3f:c7:4a:3a:48:f6:bb:b8:cf:1f:c3:
                    7c:9c:dd:81:1a:a7:99:ee:3b:03:ca:db:33:69:41:
                    9a:f1:fc:71:9d:22:1e:cd:07:1e:6c:1c:67:de:98:
                    9b:7c:4d:77:1c:b7:2b:b2:e3:06:4e:f5:c8:f6:c9:
                    bb:bf:f2:9e:0b:34:1e:88:ed:40:60:27:e0:2a:0e:
                    1e:f9:b9:e8:f0:c0:2e:08:c2:11:cc:5b:17:4f:86:
                    9c:23:71:2a:e8:25:52:64:f9:d2:89:67:71:4c:cf:
                    57:af:f2:fe:ed:ee:c7:eb:77:29:ec:cf:06:ed:4a:
                    4e:a6:57:19:00:cb:f8:60:41:f9:bb:27:ea:11:da:
                    76:de:c1:e8:ea:3d:fe:d5:e7:9f:fa:16:c8:40:6f:
                    c0:00:b1:4a:4c:cc:81:04:42:f6:05:b4:7d:7c:07:
                    61:a1:9f:3c:92:ba:26:60:95:84:e7:8a:a8:43:5c:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c400::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:15:61:09:31:11:ea:d9:7b:8d:aa:65:d4:22:17:e7:9a:b0:
         bd:9e:a7:fe:5f:9e:ef:ea:91:51:66:5c:fa:46:e4:d7:c0:93:
         c1:ea:b5:97:bd:2f:d8:a9:5c:6e:ba:38:ea:06:b8:5a:e6:e8:
         be:0a:ad:e1:a4:cd:9f:06:99:ee:fb:9c:0e:14:aa:82:82:41:
         74:b0:de:1d:19:4a:74:bb:11:c8:bb:8c:1e:78:ce:9e:a6:2c:
         71:3a:ec:8e:be:37:c8:e6:d2:65:76:fa:00:d5:72:65:07:8f:
         18:2c:6d:74:11:84:77:7a:f7:15:a8:41:3d:0e:43:f1:5e:f8:
         26:94:44:b0:12:2d:bf:58:61:d4:23:99:6c:4a:9d:c7:03:0a:
         6a:c2:d9:56:31:e9:d8:8b:54:a8:89:09:4f:1c:80:13:23:e4:
         10:2d:6f:42:ca:b2:41:54:f2:fc:65:7a:ac:55:ea:98:5d:e3:
         84:86:38:24:af:68:4c:51:6d:55:9b:a6:6b:03:1b:62:14:35:
         e5:6a:c5:ea:1a:15:94:28:4c:73:ba:18:19:c9:c6:a2:71:7e:
         d0:79:e6:41:f0:d7:6b:e7:c0:2a:e9:92:91:da:93:55:96:47:
         1f:f9:07:3e:7d:62:a6:66:62:bd:a9:41:11:a0:08:f7:c0:b3:
         4e:c3:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:44:27 2025 by rpki-client